[Linux-ima-user] Fwd: ima on x86_64?

(I have since figured out that enabling CONFIG_DEBUG_SLAB works around the
crash, but I'd still like to know if other people are using ima on x86_64 or
have had this problem)
---------- Forwarded message ----------
From: Chaskiel Grundman <cgrundman@...>
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
To: linux-ima-users@...
I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64
laptop. However, it tends to crash during modprobe operations that the
initramfs does.
There are two common errors:
one is a page fault in ima_lookup_measure_entry. it appears that a bad
pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These
are more variable, but the usual case is that a general protection fault
occurs in __free_pages or __get_vm_area_node because a pointer has invalid
syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17
bits of pointers must either be all 0 or all 1)
Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.
Is anyone using ima on x86_64? What kernel version/ima patch?
Thanks

Thread view

(I have since figured out that enabling CONFIG_DEBUG_SLAB works around the
crash, but I'd still like to know if other people are using ima on x86_64 or
have had this problem)
---------- Forwarded message ----------
From: Chaskiel Grundman <cgrundman@...>
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
To: linux-ima-users@...
I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64
laptop. However, it tends to crash during modprobe operations that the
initramfs does.
There are two common errors:
one is a page fault in ima_lookup_measure_entry. it appears that a bad
pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These
are more variable, but the usual case is that a general protection fault
occurs in __free_pages or __get_vm_area_node because a pointer has invalid
syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17
bits of pointers must either be all 0 or all 1)
Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.
Is anyone using ima on x86_64? What kernel version/ima patch?
Thanks

Thanks for pointing this out! (Your earlier e-mail must have gotten lost in
my mailbox.)
I don't have any 64bit systems right now running IMA. Any input from those
who do have access is very helpful.
Reiner
__________________________________________________________
Reiner Sailer, Research Staff Member, Secure Systems Department
IBM T J Watson Research Ctr, 19 Skyline Drive, Hawthorne NY 10532
Phone: 914 784 6280 (t/l 863) Fax: 914 784 6205, sailer@...
http://www.research.ibm.com/people/s/sailer/
From: "Chaskiel Grundman" <cgrundman@...>
To: linux-ima-user@...
Date: 02/26/2008 12:47 PM
Subject: [Linux-ima-user] Fwd: ima on x86_64?
(I have since figured out that enabling CONFIG_DEBUG_SLAB works around the
crash, but I'd still like to know if other people are using ima on x86_64
or have had this problem)
---------- Forwarded message ----------
From: Chaskiel Grundman <cgrundman@...>
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
To: linux-ima-users@...
I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64
laptop. However, it tends to crash during modprobe operations that the
initramfs does.
There are two common errors:
one is a page fault in ima_lookup_measure_entry. it appears that a bad
pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These
are more variable, but the usual case is that a general protection fault
occurs in __free_pages or __get_vm_area_node because a pointer has invalid
syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17
bits of pointers must either be all 0 or all 1)
Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.
Is anyone using ima on x86_64? What kernel version/ima patch?
Thanks
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Linux-ima-user mailing list
Linux-ima-user@...
https://lists.sourceforge.net/lists/listinfo/linux-ima-user